# Copyright 2015 Egor Tensin # This file is licensed under the terms of the MIT License. # See LICENSE.txt for details. import collections import logging import os.path import subprocess AES128, AES192, AES256 = 'aes128', 'aes192', 'aes256' ECB, CBC, CFB, OFB, CTR = 'ecb', 'cbc', 'cfb', 'ofb', 'ctr' _SUPPORTED_ALGORITHMS = AES128, AES192, AES256 _SUPPORTED_MODES = ECB, CBC, CFB, OFB, CTR def get_supported_algorithms(): return _SUPPORTED_ALGORITHMS def get_supported_modes(): return _SUPPORTED_MODES def mode_requires_init_vector(mode): if mode not in _SUPPORTED_MODES: raise NotImplementedError('unsupported mode of operation ' + s) return mode != ECB def to_supported_algorithm(s): algorithm = is_algorithm_supported(s) if algorithm is None: raise NotImplementedError('unsupported algorithm ' + s) return algorithm def is_algorithm_supported(s): s = s.lower() if s in _SUPPORTED_ALGORITHMS: return s return None def to_supported_mode(s): mode = is_mode_supported(s) if mode is None: raise NotImplementedError('unsupported mode ' + s) return mode def is_mode_supported(s): s = s.lower() if s in _SUPPORTED_MODES: return s if s == CFB + '128': return CFB return None class BlockInput: def __init__(self, key, plaintexts, iv=None): self.key = key self.plaintexts = plaintexts self.iv = iv def to_args(self): args = [self.key] if self.iv is not None: args.append(self.iv) args.extend(self.plaintexts) return args class Tools: def __init__(self, search_dirs, use_sde=False): if search_dirs: if isinstance(search_dirs, str): os.environ['PATH'] += os.pathsep + search_dirs elif isinstance(search_dirs, collections.Iterable): os.environ['PATH'] += os.pathsep + os.pathsep.join(search_dirs) else: os.environ['PATH'] += os.pathsep + str(search_dirs) self._use_sde = use_sde self._logger = logging.getLogger(__name__) _ENCRYPT_BLOCK = 'encrypt_block.exe' _DECRYPT_BLOCK = 'decrypt_block.exe' _ENCRYPT_FILE = 'encrypt_file.exe' _DECRYPT_FILE = 'decrypt_file.exe' def run(self, tool_path, args): cmd_list = ['sde', '--', tool_path] if self._use_sde else [tool_path] cmd_list.extend(args) logging.info('Trying to execute: {0}'.format( subprocess.list2cmdline(cmd_list))) try: output = subprocess.check_output( cmd_list, universal_newlines=True, stderr=subprocess.STDOUT) except subprocess.CalledProcessError as e: logging.error('Output:\n' + e.output) raise logging.info('Output:\n' + output) return output.split() @staticmethod def _block_inputs_to_args(inputs): args = [] while True: head = next(inputs, None) if head is None: break args.append('--') args.extend(head.to_args()) return args @staticmethod def _block_settings_to_args(algorithm, mode, use_boxes=False): args = [ '--algorithm', algorithm, '--mode', mode, ] if use_boxes: args.append('--use-boxes') return args @staticmethod def _build_block_args(algorithm, mode, inputs, use_boxes=False): args = Tools._block_settings_to_args(algorithm, mode, use_boxes) if isinstance(inputs, collections.Iterable): args.extend(Tools._block_inputs_to_args(iter(inputs))) else: args.extend(inputs.to_args()) return args def run_encrypt_block(self, algorithm, mode, inputs, use_boxes=False): return self.run(self._ENCRYPT_BLOCK, self._build_block_args(algorithm, mode, inputs, use_boxes)) def run_decrypt_block(self, algorithm, mode, inputs, use_boxes=False): return self.run(self._DECRYPT_BLOCK, self._build_block_args(algorithm, mode, inputs, use_boxes)) @staticmethod def _file_settings_to_args(algorithm, mode, key, input_path, output_path, iv=None): args = [ '--algorithm', algorithm, '--mode', mode, '--key', key, '--input-path', input_path, '--output-path', output_path ] if mode_requires_init_vector(mode): if not iv: raise ValueError('mode \'{}\' requires initialization vector'.format(mode)) args.extend(('--iv', iv)) return args def run_encrypt_file(self, algorithm, mode, key, input_path, output_path, iv=None): return self.run(self._ENCRYPT_FILE, self._file_settings_to_args(algorithm, mode, key, input_path, output_path, iv)) def run_decrypt_file(self, algorithm, mode, key, input_path, output_path, iv=None): return self.run(self._DECRYPT_FILE, self._file_settings_to_args(algorithm, mode, key, input_path, output_path, iv))